634282178930d02764854189989a671067b60e79c6a6c6ae652bbe6d4e807e8a

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
copy/233bc/71801270.js
Size 2KB
Sample260910-prgg9aw1ev
SHA256 634282178930d02764854189989a671067b60e79c6a6c6ae652bbe6d4e807e8a
MD5 cefb4619dc6bc4656bb5f128d021d7d5
SHA1 76d05b12d6cd25f42beb8893d1043e44c9e70156
SHA512 c73588fbde110d7489a5809dd3289345097c27dac028d65af8d225b67f3a441f2646ac0c224875de2080b971bbb57e3c9e26e7869b5c62a2c445d5ad19ac44e6
TLSH
T16741A50D33C1AB2DD28B54475A2F86196CF1C951680CE262D8ADC5D13B58C2895BDFBE
MD5 SHA1 SHA512 TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 9 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	3608	wscript.exe
4	3608	wscript.exe
5	3608	wscript.exe
7	3608	wscript.exe
8	3608	wscript.exe
9	3608	wscript.exe
10	3608	wscript.exe
11	3608	wscript.exe
12	3608	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\copy\233bc\71801270.js
1⤵
- Badlisted process makes network request
PID:3608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Bm8AaBHoX4i.exe

Path C:\Users\Admin\AppData\Local\Temp\Bm8AaBHoX4i.exe
Size 67KB
SHA256 c1cfdff5a796b3f2ae6b98dd2be932d5a1cc0f91924ed86ded2a0ace0ff99b89
MD5 6ffbc6b3520c9acf0edc7925b050381a
SHA1 6a3c6cad4abc18557347fa01d9ca206819b39695
SHA512 f9882a5b79b97d8412af9efad1cf60e2eca14d1d5834766b93bc5b0cda6061e3fed5dd36da3a2fc2ed1271dd9da07a7734e3a2f825ae89a6679087f0c940ad42
SSDEEP 1536:FypmIrJa1AYatAMAG8wA03hLmkRnOnwKv39UswIRuX:A3a1AYaAMAGfA05nnKv3mswIRuX
TLSH
T1446309BA97BD30797217C759F680B354929CF133DA0289E5F8B6915C8FC1AE600B670E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download